Azure Blob Storage fails to authenticate: "Make sure the value of Authorization header is formed correctly including the signature"

Question

Hi I am trying to upload a binary file (a blob for an excel file, actually) to my storage account but the client fails to authenticate under the error message: 403 (Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.)

Note that:

• SAS key is being generated successfully
• Blob service client is being generated using uri coming from SAS key generation response (so I believe it has the correct format
• Angular app with "@azure/storage-blob": "^12.5.0"

Would much appreciate any help on this one

async uploadFileToAzure(file : Blob, filename : string){

    let params = {
      "filename": filename, 
      "container" : 'attachments', 
      'connkey' : 'xxx'
    };

    this._authService.getSAS(params).subscribe(async sas=>{

      var blobUri = 'https://xxx.blob.core.windows.net/';
      const blobServiceClient = new BlobServiceClient(`${sas["uri"]}`);
      const containerClient = blobServiceClient.getContainerClient(params["container");
      const blockBlobClient = containerClient.getBlockBlobClient(filename);

      const uploadBlobResponse = await blockBlobClient.upload(file, file.size);
      console.log(`Upload block blob successfully`, uploadBlobResponse.requestId);
    })
  };

Thanks

Answer 1

Hello @javier ,
Thanks for your query !
Can you validate if your storage account is firewall enabled ?

Steps:-
Azure Portal -> Storage Account -> Networking -> Check Allow Access From (All Networks / Selected Networks)
If it is "Selected Networks" - It means the storage account is firewall enabled.

If the storage account is firewall enabled , check your angular app is whitelisted to access.

Couple of additional work arounds mentioned here
https://stackoverflow.com/questions/24492790/azurestorage-blob-server-failed-to-authenticate-the-request-make-sure-the-value

Let us know if the above steps helps out in resolving the issue , please don't forget to Upvote and Accept the Answer

Answer 2

Hello @shiva patpi

Hope you are doing well.

I have created a SAS URL for Blob and while accessing that URL from browser I am getting the below error :

<Error>
<Code>AuthenticationFailed</Code>
<Message>Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.
<AuthenticationErrorDetail>Signature did not match. String to sign used was r 2021-08-30T21:01:16Z 2021-08-31T05:03:16Z /blob/blobname/$root https 2020-08-04 c </AuthenticationErrorDetail>
</Error>

I tried to change the header using the chrome extension and set a new header request - x-ms-version: 2020-04-08

But still we are getting the same error.

It would be really helpful if you please assist me over it.

Answer 3

I had the same issue when trying to copy data from an azure blob storage into snowflake. My initial SAS URI was at the blob level, meaning that I went inside the container where my data was held and generated a SAS URI. This did not work and received the same error above. Next I tried to create a SAS URI at the storage account level instead and it fixed the authentication issue. I hope that helps whoever's reading this.

Answer 4

Operation on target Copy data1 failed: Failure happened on 'Sink' side. ErrorCode=FileForbidden,'Type=Microsoft.DataTransfer.Common.Shared.HybridDeliveryException,Message=Error occurred when trying to upload a blob, detailed message: dbo.test_adf.txt,Source=Microsoft.DataTransfer.ClientLibrary,''Type=Microsoft.WindowsAzure.Storage.StorageException,Message=The remote server returned an error: (403) Forbidden.,Source=Microsoft.WindowsAzure.Storage,StorageExtendedMessage=Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature.
RequestId:d4324c64-c01e-000d-805e-aaad3d000000
Time:2021-09-15T18:24:20.4319553Z,,''Type=System.Net.WebException,Message=The remote server returned an error: (403) Forbidden.,Source=Microsoft.WindowsAzure.Storage,'

I am getting this error. Can someone help

Answer 5

This can be caused by having the access keys to the storage account out of sync in the Azure ML Workspace.

Running "az ml workspace sync-keys --name <workspace-name> -g <rg-name>" fixed this for me

Best,

Joaquim